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RECEIVED 
CENTRAL FAX CENTER 

JUN 26 2007 

Amendment to the Ciaiitis: 

This listing of the claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of the Claims: 

1 . (Currently Amended) A system for interdicting unauthorized copying in a 
decentralized network comprising: 

one or more first computers having a plurality of software agents masquerading as 
nodes in a decentralized network; and 

one or more second computers having a query matcher that receives search results 
from the plurality of software agents, and reports matches of the search results with 
protected files back to the plurality of software agents so that the software agents can 
interdict imauthorized copying of the protected files in the decentralized network. 

2. (Currently Amended) The system according to claim 1 , wherein the 
plurality of software agents communicate with r e s id e on on e or mor e comput e r s whil e 
oomniunicQting to the decentralized network through individually assigned ports. 

3. (Currently Amended) The system according to claim 2, wherein the 
assigned ports have corresponding IP addresses that change in a manner so as to deter 
[[that]] detection of the plurality of software agents as unauthorized masqueraders of 
nodes in the decentralized network, i s mad e diflScult. 

4. (Currently Amended) The system according to claim 2, wherein the 
number and geographical locations of the one or more first computers is determined by 
the number and geographical distribution of nodes in the decentralized network. 



Applic. Ser. No. 1 0/803 .784 Page 2 of 1 9 Atty . Docket No. 024 1 

PAGE 3/20 * RCVD AT 6/26/2007 2:41 :16 PM [Eastern Daylight Time] * 8VR:USPTO-EFXRF-6/2 * DNIS:2738300 * C8ID:Fax: (510) 792-3322 * DURATION (mm-ss):08-04 



6/26/2007 11:41 AM FROM: Fax: (510) 792-3322 TO: 



1 571 2738300 PAGE: 004 OF 020 



5. (Currently Amended) The system according to claim 1, wherein the one or 
more second computers qu e ry matcher has a database including metadata for the 
protected files. 

6. (Currently Amended) The system according to claim 1, wherein the one or 
more second computers has f urtlior comprising a central coordinating authority 
coordinating activities of the plurality of software agents so as to interdict unauthorized 
copying in the decentralized network. 

7- (Original) The system according to claim 6, wherein the central 
coordinating authority sends instructions to the plurality of software agents specifying 
actions to be taken when the plurality of software agents receive matches of the search 
results with protected files back from the query matcher. 

8. (Original) The system according to claim 7, wherein the instructions sent 
by the central coordinating authority include an instruction to generate modified search 
results by deleting at least a subset of references corresponding to the matches of the 
search results, and forward the modified search results through the decentralized network. 

9- (Original) The system according to claim 7, wherein die instructions sent 
by the central coordinating authority include an instruction to generate modified search 
results by modifying at least a subset of references corresponding to the matches of the 
search results so as to point to one or more IP addresses that are invalid, and fonyard the 
modified search results through the decentralized network. 

10. (Original) The system according to claim 7, wherein the instructions sent 
by the central coordinating authority include an instruction to generate modified search 
results by modifying at least a subset of references corresponding to the matches of the 
search results so as to point to one or more IP addresses of nodes that do not have copies 
of the subset of references, and forward the modified search results through the 
decentralized network. 
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11. (Original) The system according to claim 7, wherein the instructions sent 
by the central coordinating authority include an instruction to generate modified search 
results by modifjang at least a subset of references corresponding to the matches of the 
search results so as to point to one or more IP addresses of nodes that are not connected 
to the decentralized network, and forward the modified search results through the 
decentralized network. 

12. (Original) The system according to claim 7, wherein die instructions sent 
by the central coordinating authority include an instruction to generate modified search 
results by modifying at least a subset of references corresponding to the matches of the 
search results so as to point to alternative files, and forward the modified search results 
through the decentralized network. 

13. (Original) The system according to claim 12, wherein the alternative files 
include at least one randomly selected file residing on a node upon which one of the 
matches of the search results resides. 

14. (Original) The system according to claim 12, wherein the alternative files 
include at least one decoy file residing on a host node controlled by the central 
coordinating authority, 

15. (Original) The system according to claim 12, wherein the alternative files 
include at least one randomly selected file residing on a host node controlled by the 
central coordinating authority. 

16. (Original) The system according to claim 12,. wherein the alternative files 
include at least one rights-managed version of the matches. 
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17. (Original) The system according to claim 7, wherein the instructions sent 
by the central coordinating authority include an instruction to send an altemative file to a 
client node when a request for a protected file is received firom the client node. 

18. (Original) The system according to claim 17, wherein the altemative file is 
a decoy, 

19. (Original) The sj^tem according to claim 18, wherein the decoy is an 
audio file containing white noise. 

20. (Original) The system according to claim 18, wherein the decoy is a video 
file containing white noise. 

21. (Original) The system according to claim 1 8, wherein the decoy is an 
application containing a NOP executable that terminates the application when executed. 

22. (Original) The system according to claim 18, wherein the decoy is an 
image file containing snow. 

23. (Original) The system according to claim 18, wherein the decoy is a 
document with blank contents. 

24. (Original) The system according to claim 18, wherein the decoy contains 
an anti-piracy message. 

25. (OrigLaal) The system according to claim 17, wherein the altemative file is 
a rights managed version of the protected file. 

26. (Withdrawn) The system according to claim 1 7, wherein the instructions 
sent by the central coordinating authority include an instruction to transmit the altemative 
file such that the transmission rate slows down during the transmission. 
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27. (Withdrawn) The system according to claim 17, wherein the instructions 
sent by the central coordinating authority include an instruction to transmit the alternative 
file such that the transmission terminates automatically after most, but not all of the 
altemative file has been downloaded. ^ 

28. (Origmal) The system according to claim 7, wherein the instructions sent 
by the central coordinating authority include an instruction to modify at least one 
reference corresponding to a match in the search results so as to point to a non-existent 
file along with a reported hash value that does not correspond to any file in the 
decentralized network instead of the at least one reference. 

29. (Original) The system according to claim 7, wherein the instructions sent 
by the central coordinating authority include an instruction to modify a reference 
corresponding to a match in the search results so as to point to a spoof file instead of the 
reference and report a hash value matching that of the reference even though the contents 
of the spoof file do not exactly match that of the reference. 

30. (Original) The system according to claim 1, wherein the decentralized 
network comprises: 

a plurality of nodes; and 

a plurality of supemodes individually having higher resources than each of the 
plurality of nodes so that a search string initiated from one of the plurality of nodes is 
first routed to one of the plurality of supemodes. 

31. (Original) The system according to claim 30, wherein the plurality of 
software agents inform their respective supemodes that they have copies of protected 
files and claim node attributes so that the plurality of software agents will be selected as 
top matches by their respective supemodes for search strings indicating the protected 
files. 
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32. (Original) The system according to claim 30, wherein the plurality of 
software agents inform the decentralized network that they are supemodes. 

33. (Original) The system according to claim 30, wherein the plurality of 
• software agents report to the decentralized network that they possess attributes that 

qualify them as supemodes under the protocol of the decentralized network. 

34. (Currently Amended) A method for interdicting unauthorized copying in a 
decentralized network, comprising: 

mfiltrating a decentralized network with a plurality of software agents residing on 
one or more first computers and m asquerading as nodes so as to intercept . 
communications related to search queries; 

transmitting information of the intercepted communications to one or more 
second computers extemal of the decentralized network so that a query matcher residing 
on the one or more second computers identifies i d e ntifying references to protected files in 
the communications; and 

transmitting information of identified references back to corresponding of the one 
or more first computers for interdicting unauthorized copying of the protected files with 
respect to the communications. 

35. (Original) The method according to claim 34, wherein the decentralized 
network is an hierarchical network with supemodes and regular nodes, and the plurality 
of software agents masquerade as regular nodes that inform their respective supemodes 
that they have copies of protected files and claim node attributes so that the plurality of 
software agents will be selected as top matches by their respective supemodes for search 
strings indicating the protected files. 

36. (Original) The method according to claim 34, wherein the decentralized 
network is an hierarchical network with supemodes and regular nodes, and the plurality 
of software agents inform the decentralized network that they are supemodes according 
to the protocol of the decentralized network, 
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37. (Original) The method according to claira 34, wherein the decentralized 
network is an hierarchical network with supemodes and regular nodes, and the plurality 
of software agents report to the decentralized network that they possess attributes that 
qualify them as supemodes under the protocol of the decentralized network. 

38. (Original) The method according to claim 34, wherein the 
communications are search results, and the interdicting of unauthorized copying 
comprises: generating modified search results by deleting at least a subset of references 
corresponding to the protected files in the search results, and forwarding the modified 
search results through the decentralized network. 

39. (Original) The method ac<:ording to claim 34, wherein the 
communications are search results, and the interdicting of imauthorized copying 
comprises: generating modified search results by modifying at least a subset of references 
corresponding to the protected files in the search results to point to one or niore invalid IP 
addresses, and forwarding the modified search results through the decentralized network. 

40. (Original) The method according to claim 34, wherein the 
communications are search results, and the interdicting of unauthorized copying 
comprises: generating modified search results by modifying at least a subset of references 
corresponding to the protected files in the search results to point to one or more IP 
addresses that do not host the subset of references, and forwarding tbe modified search 
results through the decentralized network. 

4 1 . (Ori ginal) The method according to claim 34, wherein the 
communications are search results, and the interdicting of imauthorized copying 
comprises: generating modified search results by modifying at least a subset of references 
corresponding to the protected files in the search results to point to one or more IP 
addresses that are not connected to the decentralized network, and forwarding the 
modified search results through the decentralized network. 
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42. (Original) The method according to claim 34, wherein the 
communications are search results, and the interdicting of unauthorized copying 
comprises: generating modified search results by modifying at least a subset of references 
corresponding to the protected files in the search results to point to altemative files, and 
forwarding the modified search results through the decentralized network. 

43. (Original) The method according to claim 42, wherein the altemative files 
include at least one synthesized decoy file. 

44. (Original) The method according to claim 42, wherein the altemative files 
include at least one rights-managed version of one of the protected files referenced in the 
search results. 

45. (Original) The method according to claim 34, wherein one of the 
communications is a request firom a client node to one of the plurality of software agents 
for a copy of a protected file, and further comprising: sending an altemative file to the 
client node in lieu of the copy of the protected file. 

46. (Original) The method according to claim 45, wherein the altemative file 
is a synthesized decoy file. 

47. (Original) The method according to claim 46, further comprising: 
synthesizing the decoy file by filling the decoy file with white noise. 

48. (Original) The method according to claim 46, further comprising: 
synthesizing the decoy file by filling the contents of the decoy file with an anti-piracy 
message. 
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49. (Original) The method according to claim 46, wherein the protected file is 
an application program, and further comprising: synthesizing the decoy file by including 
a NOP executable that terminates when executed 

50. (Original) The method according to claim 45, wherein the alternative file 
is a rights-managed version of the protected file. 

5 1. (Withdrawn) The method according to claim 45, wherein the sending an 
alternative file comprises: transmitting the alternative file at a transmission rate that slows 
down during the transmission. 

52. (Withdrawn) The method according to claim 45, wherein the sending an 
alternative file comprises: transmitting the alternative file in a manner such that the 
transmission terminates automatically after most, but not all of the alternative file has 
been downloaded. 

53. (Original) The method according to claim 34, wherein one of the 
communications is search results, and the interdicting of unauthoriz€5d copying 
comprises: generating modified search results by providing a pointer to a non-existent file 
instead of another pointer to a reference in the search results that matches a protected file, 
and forwarding the modified search results through the decentralized network. 

54. (Original) The method according to claim 53, wherein a reported hash 
value that does not match any file in the decentralized network is provided along with the 
pointer to the non-existent file, 

55. (Original) The method according to claim 34, wherein one of the 
communications is search results, and the interdicting of unauthorized copying 
comprises: generating modified search results by replacing a pointer to a reference in the 
search results that matches a protected file Avith another pointer to a spoof file along with 
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a hash value matching that of the reference, and forwarding the modified search results 
through the decentralized network. 

56. (Original) The method according to claim 34, wherein one of the 
communications is a request to one of the plurality of software agents from a client node 
for at least a segment of a protected file, and the interdicting of unauthorized copying 
comprises: transmitting data to the client node in response to the request so that a 
corrupted file is detected upon completion of. downloading of the protected file to the 
client node. 

Claims 57-70 (Cancelled). 
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